🏰 ClawMoat v0.2.0 — Memory Poisoning, Supply Chain, Exfiltration Detection
What's New in v0.2
5 new security scanners — 37/37 tests passing, still zero dependencies.
New Scanners
🧠 Memory Poisoning Detection — Catches attempts to poison OpenClaw's MEMORY.md, SOUL.md, and config files. Detects time-bomb patterns ('next time you see X, do Y') and persistent injection across sessions. No other tool does this.
📦 Supply Chain Scanner — Scans OpenClaw skills for malicious patterns: obfuscated code (eval/atob), sensitive file access, outbound network requests, system modification attempts.
🔗 Phishing URL Detection — Flags IP-based URLs, punycode/homograph attacks, suspicious TLDs, URL shorteners, data: URIs with executable content, and suspicious path patterns.
🔒 PII Detection — Catches emails, phone numbers, SSNs, credit card numbers (Luhn-validated), internal IP addresses, physical addresses, and patient/client names in outbound messages.
📡 Exfiltration Detection — Detects data being sent to paste services, base64-encoded payloads in outbound requests, DNS exfiltration patterns, credential piping, and email forwarding of sensitive content.
Coverage Update
- MIT AI Risk Repository: 13/24 subdomains (up from 8/24)
- OWASP Agentic Top 10: ASI01-ASI06 covered
- Tests: 37/37 passing (up from 20/20)
- Dependencies: still zero
Quick Start
npm install -g clawmoat
clawmoat test # 37 tests
clawmoat audit # Scan your sessions
clawmoat watch # Live monitoringGitHub: https://github.com/darfaz/clawmoat
Site: https://clawmoat.com